CVE-2025-52664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

CVE-2025-52664

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

CVE-2025-52664

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

Salt Typhoon APT Group: What Public Sector Leaders and Defenders Should Know

The Rapid7 Threat Focus: Salt Typhoon report profiles one of the most sophisticated and persistent state-sponsored threat actors operating today. Salt Typhoon, a Chinese espionage advanced persistent threat APT group linked to the Ministry of State Security MSS, has spent years infiltrating globa...

The State of Agentic AI: Disrupting Publishing and Reshaping Ecommerce

Learn how agentic AI is transforming how users and automation interact with the web — changing how people shop, search, and consume content...

DB2 IBM DB2 High Performance Unload Heap Buffer Overflow DoS

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

D-Link DIR600L Router DoS

The vulnerability of the formAdvFirewall function in the microprogramming software for D-Link DIR600L routers is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to caus...

D-Link DIR600L Router DoS

The vulnerability of the formWlSiteSurvey function in D-Link DIR600L router microprogramming software is related to the copying of buffer contents without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause...

DB2 IBM DB2 High Performance Unload Buffer Overflow DoS

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to the use of the sizeof function on pointer types. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

Tenda AC6 Router Address Nat Code Execution

The vulnerability of the addressNat function in Tenda AC6 microprogramming devices relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP reque...

Linux kernel Network DoS

The vulnerabilities of the functions nvmetcpFetchRequest, nvmetcpInitRequest, nvmetcpHandleR2T, and nvmetcpSubmitAsyncEvent driver/nvme/host/tcp.c in the Linux kernel involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow an attacker to cause servi...

crypto-x509 Go DoS

The vulnerability of the crypto-x509 component in the Go programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2025-59462

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...

CVE-2025-59461

A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services...

CVE-2025-59459

An attacker that gains SSH access to an unprivileged account may be able to disrupt services including SSH, causing persistent loss of availability...

Linux DoS

The vulnerability of the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Tenda O3 SetValue GetValue DoS

The vulnerability of the SetValue and GetValue functions in the Tenda O3 wireless access point software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the dmzIP parameter at the setDmzInfo endpoint. Exploiting this vulnerability could allow an attacker...

Linux appletb_kbd_probe Heap Buffer Overflow DoS

The vulnerability of the appletbkbdprobe function in the Linux operating system is related to improper manipulation of the link counter for resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...